https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:36:38 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0255 certfr-2026-avi-0255 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0255 https://cve.radiocsirt.org/vuln/cnvd-2026-13386 cnvd-2026-13386 https://cve.radiocsirt.org/vuln/cnvd-2026-13386 https://cve.radiocsirt.org/vuln/euvd-2026-316867 EUVD-2026-316867 https://cve.radiocsirt.org/vuln/euvd-2026-316867 https://cve.radiocsirt.org/vuln/fkie_cve-2025-40943 <p>Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering an authorized user, who has the function right &#34;Read diagnostics&#34;, to import a specially crafted trace file. The malicious trace file is insufficiently sanitized and malicious code could be executed in the clients browser session and trigger PLC operations via the webserver that the legitimate user is authorized to perform.</p> <p>Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering an authorized user, who has the function right &#34;Read diagnostics&#34;, to import a specially crafted trace file. The malicious trace file is insufficiently sanitized and malicious code could be executed in the clients browser session and trigger PLC operations via the webserver that the legitimate user is authorized to perform.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-40943 https://cve.radiocsirt.org/vuln/ghsa-v7h2-5j7f-whwh <p>Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering a legitimate user to import a specially crafted trace file</p> <p>Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering a legitimate user to import a specially crafted trace file</p> https://cve.radiocsirt.org/vuln/ghsa-v7h2-5j7f-whwh https://cve.radiocsirt.org/vuln/icsa-26-071-04 <p>Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering an authorized user, who has the function right &#34;Read diagnostics&#34;, to import a specially crafted trace file. The malicious trace file is insufficiently sanitized and malicious code could be executed in the clients browser session and trigger PLC operations via the webserver that the legitimate user is authorized to perform.</p> <p>Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering an authorized user, who has the function right &#34;Read diagnostics&#34;, to import a specially crafted trace file. The malicious trace file is insufficiently sanitized and malicious code could be executed in the clients browser session and trigger PLC operations via the webserver that the legitimate user is authorized to perform.</p> https://cve.radiocsirt.org/vuln/icsa-26-071-04 https://cve.radiocsirt.org/vuln/ncsc-2026-0079 NCSC-2026-0079 https://cve.radiocsirt.org/vuln/ncsc-2026-0079 https://cve.radiocsirt.org/vuln/ssa-452276 <p>Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering an authorized user, who has the function right &#34;Read diagnostics&#34;, to import a specially crafted trace file. The malicious trace file is insufficiently sanitized and malicious code could be executed in the clients browser session and trigger PLC operations via the webserver that the legitimate user is authorized to perform.</p> <p>Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering an authorized user, who has the function right &#34;Read diagnostics&#34;, to import a specially crafted trace file. The malicious trace file is insufficiently sanitized and malicious code could be executed in the clients browser session and trigger PLC operations via the webserver that the legitimate user is authorized to perform.</p> https://cve.radiocsirt.org/vuln/ssa-452276 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0652 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Siemens SIMATIC S7 ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Siemens SIMATIC S7 ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0652